Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/624220-c076-4a1d-aefb-b7f5d4395cc0/1/uVvHj8YhZvXYBEDGZyiTNCPwkzA.roa
File: uVvHj8YhZvXYBEDGZyiTNCPwkzA.roa (raw, json)
Hash identifier: 7ShC1NAqV9aBja6Cre8f0fxWQeG8CgYnhfqQ13Zj/Ng=
Subject key identifier: B9:5B:C7:8F:C6:21:66:F5:D8:04:40:C6:67:28:93:34:23:F0:93:30
Certificate issuer: /CN=9c329f3331f5343f290eb4a41f16c4363a282c90
Certificate serial: 018CC5DBEB15072A9F841DC667F1E78A881E
Authority key identifier: 9C:32:9F:33:31:F5:34:3F:29:0E:B4:A4:1F:16:C4:36:3A:28:2C:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nDKfMzH1ND8pDrSkHxbENjooLJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/624220-c076-4a1d-aefb-b7f5d4395cc0/1/uVvHj8YhZvXYBEDGZyiTNCPwkzA.roa
Signing time: Mon 01 Jan 2024 16:29:33 +0000
ROA not before: Mon 01 Jan 2024 16:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41992
IP address blocks: 193.34.152.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/624220-c076-4a1d-aefb-b7f5d4395cc0/1/nDKfMzH1ND8pDrSkHxbENjooLJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/624220-c076-4a1d-aefb-b7f5d4395cc0/1/nDKfMzH1ND8pDrSkHxbENjooLJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nDKfMzH1ND8pDrSkHxbENjooLJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:eb:15:07:2a:9f:84:1d:c6:67:f1:e7:8a:88:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c329f3331f5343f290eb4a41f16c4363a282c90
Validity
Not Before: Jan 1 16:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b95bc78fc62166f5d80440c66728933423f09330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:85:9a:98:30:f1:3a:ca:44:1e:0c:18:b3:ac:
f6:4d:08:24:5e:6f:53:af:f4:05:df:74:aa:77:2c:
e0:24:87:c4:74:72:2f:4e:ca:ff:ca:42:4f:38:cb:
e8:81:a7:76:cb:3c:fc:5c:29:d8:b1:fe:1f:69:ce:
31:f2:a9:85:11:0c:55:ae:6c:4f:65:ba:aa:f6:47:
b3:e1:0a:89:d9:b9:9e:25:b3:b6:04:c2:39:f0:a9:
e8:e6:69:22:32:a1:90:1f:6d:f5:b6:c0:05:e6:d3:
cb:5c:f4:24:de:47:f5:15:74:2a:ae:4f:5d:8b:a9:
68:1f:6f:f6:7f:da:65:90:3d:a2:80:e8:0f:99:9f:
1a:ac:b5:8b:cf:c5:6b:d4:cf:63:fd:48:08:1c:76:
8c:d5:94:d5:05:25:a9:4b:8a:36:a6:7d:c2:05:c4:
a0:c6:44:37:7c:71:16:c7:d5:17:6d:28:e2:51:55:
fd:b0:fb:4c:b5:8d:20:10:5f:2c:d4:5b:c7:02:44:
9d:d9:f2:f2:1f:6d:eb:5b:fe:1a:f2:c9:25:91:3e:
4d:4a:1c:4c:bd:59:ba:f8:35:a5:4f:3f:3b:8b:be:
f0:e0:a4:e9:0f:01:b4:15:8f:92:eb:fa:8e:d8:91:
c4:02:87:97:00:7e:86:f2:f9:4e:05:ff:a7:fd:f2:
a9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:5B:C7:8F:C6:21:66:F5:D8:04:40:C6:67:28:93:34:23:F0:93:30
X509v3 Authority Key Identifier:
keyid:9C:32:9F:33:31:F5:34:3F:29:0E:B4:A4:1F:16:C4:36:3A:28:2C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDKfMzH1ND8pDrSkHxbENjooLJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/624220-c076-4a1d-aefb-b7f5d4395cc0/1/uVvHj8YhZvXYBEDGZyiTNCPwkzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/624220-c076-4a1d-aefb-b7f5d4395cc0/1/nDKfMzH1ND8pDrSkHxbENjooLJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.152.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:cc:c9:a9:bb:de:2a:72:23:70:56:92:ee:f0:07:da:c9:cd:
72:d0:63:3d:25:0e:24:29:08:09:a6:07:96:be:ce:7c:07:fc:
c4:cd:45:dc:61:5c:b0:5a:2e:78:e8:26:4c:41:10:46:ff:bd:
8e:49:26:80:3a:3a:57:2d:01:df:97:4a:c9:49:ea:8f:b6:7f:
fa:e3:b9:96:78:6c:ad:51:cd:fb:56:e6:34:15:da:ab:6e:17:
58:8b:aa:43:1f:2b:2a:fe:43:ca:fa:85:d1:34:9d:a4:a6:07:
f3:20:a1:5d:5e:7b:03:02:c0:aa:3f:20:a4:22:09:35:ba:be:
86:29:26:fb:33:ec:6c:97:15:f6:fd:f8:02:1a:d8:b9:98:1f:
db:18:16:6d:a9:b9:df:94:1a:79:d8:f1:43:5b:c6:63:11:9b:
7d:59:e2:42:cd:f2:7c:c3:67:1d:12:ab:c3:a5:71:85:91:80:
ab:53:ae:5f:56:9a:24:c4:3f:e6:b1:fd:af:12:37:05:a2:f6:
0c:0d:21:19:a6:19:30:63:2a:08:c7:c9:e9:bf:14:99:69:3f:
9f:74:53:45:9d:a3:36:20:52:8f:7a:84:09:ac:38:ff:5f:1b:
22:97:0f:7a:ef:84:19:c6:28:54:06:42:63:ef:bf:cc:13:d3:
27:ce:2d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 23:54:25 2024 by rpki-client on console-fra.rpki-client.org